Windows Defender flagging VSCodium Installer as Cinjo malware

[andrew-martin-ssp]

Cinjo is getting detected in VSCodium's installers.

This link is another not-closed instance of this

#2540 (comment)

I don't have the issue... It's a false positive.

* https://www.virustotal.com/gui/url/609d6d4903cb4343ba764776f1219b0d8a9f7f2189ac5210f69fb7cb238a1230

* https://www.virustotal.com/gui/file/33437e1b2574e62b236d84da530ffccdf6324db56a4b5efb8bfa62fb5a2ff6b4 (for the VSCodium.exe, it's the electron binary)

It happened on other apps: guiqui/k8Studio#24

This validates that it isn't a virus

Am I just at Windows Defender's mercy?

[daiyam]

Am I just at Windows Defender's mercy?

Sadly yes

[andrew-martin-ssp]

I went and installed the latest Windows User build from Releases, and ran it. I've been working with IT on this because they caught the malware in the first place. They told me to note that the .EXE is not signed, and that's part of why it's being caught.

If that's not the issue, I'm looking at my extensions as well

[daiyam]

They told me to note that the .EXE is not signed, and that's part of why it's being caught.

Ya, signing might help.
The installers are signing with SignPath. I will ask them.